Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer (raw, json)
Hash identifier: Ptl3JhjR7lcUMGwGGfmYez5NvkLVZEfwFpoavRGol/4=
Subject key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244587664F3906D5B5B9DDDDD7A26114
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41923
IP: 193.34.56.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:87:66:4f:39:06:d5:b5:b9:dd:dd:d7:a2:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:53:bb:10:d8:1a:8c:6f:28:fc:a0:36:c7:bb:
4c:2c:ee:ea:23:3b:db:1f:d8:d2:12:ba:62:2b:8c:
ee:f3:49:14:eb:3a:1a:e9:2a:d7:e7:3b:1c:28:99:
99:83:be:73:36:10:9d:70:b5:17:ac:ee:26:37:ef:
21:be:a8:5a:4e:9b:9a:f7:ed:19:b3:c8:b4:28:b4:
ab:00:23:3c:78:68:c9:37:ac:7b:62:f5:b4:3b:34:
64:e3:d4:c8:97:66:55:3d:cc:bf:d9:6e:33:8e:66:
3a:d1:0d:0e:87:e7:42:78:f0:d0:f4:49:b4:14:f2:
3d:42:69:e2:85:cb:51:a9:9b:99:65:4f:e9:62:d8:
f2:68:32:ec:ab:35:00:a5:9f:51:5c:81:d2:ed:4b:
a1:ee:05:9f:d8:39:01:e7:56:18:4a:fe:77:8a:5e:
4f:11:71:ef:fe:fa:73:9f:91:9e:77:06:da:f0:65:
3e:2c:c9:1f:27:b8:89:15:78:69:7c:d7:3b:b6:b9:
8b:de:39:d8:d5:d2:9a:71:e0:66:5b:e5:3b:c6:78:
e4:4e:41:65:18:57:5b:32:50:65:0a:79:50:83:f0:
c3:aa:45:85:6a:47:c0:c4:9c:43:26:81:31:e2:59:
e5:28:4a:b9:af:2c:f0:cf:c9:13:c9:e3:cd:61:e1:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41923
Signature Algorithm: sha256WithRSAEncryption
41:d1:09:11:7c:b9:b7:43:d7:eb:82:23:49:5e:d2:a4:82:c1:
3d:4a:c9:d3:48:73:c9:f1:ab:91:9d:0b:7a:1c:0a:3b:21:01:
ef:51:91:64:10:ff:12:5a:81:33:b3:32:19:0e:b0:01:c3:46:
1b:8a:d9:59:08:6b:6f:df:9b:42:86:eb:cd:a9:7b:b6:8f:6c:
28:fd:d1:cb:73:b7:28:78:be:41:be:9a:f9:f5:31:79:f8:79:
2f:3c:8b:88:e1:35:00:9c:f1:b8:ef:a4:f4:ff:27:e7:fe:c5:
c8:cf:88:17:3c:35:24:04:79:f2:78:85:fc:86:05:a5:88:38:
d8:86:e9:e5:0c:d4:cd:0d:2d:27:12:cc:19:b8:f6:3f:d1:57:
33:70:ee:a2:82:fe:32:45:f1:d0:f0:95:24:9a:69:6a:a3:04:
ab:cc:f2:aa:43:85:a8:1b:ff:37:cc:3b:9e:c0:d4:ae:c0:77:
4c:c2:a0:1a:ab:e9:1d:2c:d7:8d:d2:26:ef:fa:b8:d2:e0:2c:
7e:66:bd:fa:21:33:5e:70:bf:fa:9a:59:07:2b:9b:a3:7e:ff:
56:35:00:c3:cc:82:a7:72:28:38:de:7b:ff:b3:3f:8c:aa:32:
ec:06:57:77:9b:1e:8c:36:5a:22:8d:64:5e:a8:65:ca:54:f6:
e3:75:9a:c9
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQkRYdmTzkG1bW53d3XomEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGQ5NzcwYzMwN2VhMzk2MGM4ZGEyNjhhODg2NWE0YTlmYTYzNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VO7ENgajG8o/KA2x7tMLO7qIzvb
H9jSErpiK4zu80kU6zoa6SrX5zscKJmZg75zNhCdcLUXrO4mN+8hvqhaTpua9+0Z
s8i0KLSrACM8eGjJN6x7YvW0OzRk49TIl2ZVPcy/2W4zjmY60Q0Oh+dCePDQ9Em0
FPI9QmnihctRqZuZZU/pYtjyaDLsqzUApZ9RXIHS7Uuh7gWf2DkB51YYSv53il5P
EXHv/vpzn5Gedwba8GU+LMkfJ7iJFXhpfNc7trmL3jnY1dKaceBmW+U7xnjkTkFl
GFdbMlBlCnlQg/DDqkWFakfAxJxDJoEx4lnlKEq5ryzwz8kTyePNYeFMowIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzQ0NDRh
Yi0zZGEzLTQxOGItYTEwNS1mMmZlMGQwNGJmYmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNDQ0NGFi
LTNkYTMtNDE4Yi1hMTA1LWYyZmUwZDA0YmZiZi8xLzNkbDNEREItbzVZTWphSm9x
SVphU3AtbU5Nay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwSI4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCjwzANBgkqhkiG9w0BAQsFAAOCAQEAQdEJEXy5t0PX64IjSV7SpILBPUrJ00hz
yfGrkZ0LehwKOyEB71GRZBD/ElqBM7MyGQ6wAcNGG4rZWQhrb9+bQobrzal7to9s
KP3Ry3O3KHi+Qb6a+fUxefh5LzyLiOE1AJzxuO+k9P8n5/7FyM+IFzw1JAR58niF
/IYFpYg42Ibp5QzUzQ0tJxLMGbj2P9FXM3DuooL+MkXx0PCVJJppaqMEq8zyqkOF
qBv/N8w7nsDUrsB3TMKgGqvpHSzXjdIm7/q40uAsfma9+iEzXnC/+ppZByubo37/
VjUAw8yCp3IoON57/7M/jKoy7AZXd5sejDZaIo1kXqhlylT243WayQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:31 2025 by rpki-client